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SECURE PARAMETER GENERATlNd^ DEVICE AND METHOD FOR ALGEBLAIC CURVE 
CRYPTOGRAPH , AND RECORDING MEDIUM 

PUB. NO.: 2001-066987 [JP 2001066987 A] 

PUBLISHED: March 16, 2001 (20010316) 

INVENTOR (s) : ARITA MASATAKE 
APPLICANT (s) : NEC CORP 
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FILED: August 27, 1999 (19990827) 
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PROBLEM TO BE SOLVED: To improve the security of an algebraic curve 

cryptograph by enabling a complicated high order algebraic curve, which 
can not conventionally be used, for the algebraic curve cryptograph . 

SOLUTION: A Stickerberger element calculating unit 11 calculates a 
Stickerberger element (ω) in a, b divided fields of a circle, then an 
Jacobi sum candidate value, calculating unit 12 calculates an Jacobi sum 
cadidate value (j) and a prime number (p) corresponding to the Jacobi sum 
candidate value (j) f rom/a- ^prime number (a), a prime number (b) , the size 
(n) of a cryptographic key and the Stickerberger element (Iomega;) and an 
order candidate value calculating unit 13 calculates a set H consisting of 
plural candidates of the order of the Jacobian group of an algebraic 
curve from the prime number (a) , the prime number (b) and the Jacobi sum 
cadidate value (j) and a safety judging unit 14 retrieves a candidate value 
(h) satisfying a safety condition of an almost prime property or the like 
from among the set H and a parameter deciding unit 15 calculates parameters 
of an algebraic curve which is specified by the prime number (a) , the prime 
number (b) and the prime number (p) and whose order of the Jacobian group 
coincides with the candidate value (h) . 
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METHOD FOR COMPUTING POJN^f ' ^ ON ELLIPTIC CURVE ON ELEMENT ASSEMBLY AND 
APPARATUS THEREFOR 

PUB. NO.: 2000-181347 [JP 2000181347 A] 

PUBLISHED: June 30, 2000 (20000630) 
INVENTOR (s) : ITO KOICHI 

TAKENAKA MASAHIKO 



PROBLEM TO BE SOLVED: To enable addition processing without executing 
inverse number computation and to enable high-speed processing without 
adding additive coordinates by using the Jacobian coordinates obtained by 
three-dimensionally projecting the points on an elliptic curve on an 
element assembly. '^^^ 



ABSTRACT 
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ABSTRACT 




St)LUTION-: ^ In . the method of executing the computation by combining the 
double calculation processing and addition processing in accordance with 
the multiplier converted to a binary digit system expressed, the points (x, 
y) on the elliptic curv6 on the element assembly are converted to the 
Jacobian coordinate expression of attaining (x, y)=(X/Z2, Y/Z3) and in 
the case of continuous execution of the double calculation processing, the 
computation results (Xt+1, Yt+1, Zt+1) at the point of the time (t+1) of 
the continuous double calculation processing is subjected to the arithmetic 
processing with the calculation equation shown by the equation using the 
present Jacobian coordinates (Xt, Yt, Zt) . In such a case, the value of 
Y' which is the value of twice the Y coordinate is first calculated and the 
number of times of the addition system in the double calculation at the 
point of the Jacobian coordinates is decreased by using the value of Y' . 
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ABSTRACT 

PROBLEM TO BE SOLVED: To enable addition processing without performing 
reciprocal operation and to enable high speed processing without involving 
an additional coordinates by using Jacobian coordinates obtained by 
projecting a point on an elliptic curve on a prime field is projected in 
the three dimensional space. 

SOLUTION: When points (x, y) on an ellipse curve on a prime field indicated 
by y2=x3+ax+b (mod p) is multiplied by a multiplier, this is a method in 
which doubling calculation processing and addition processing are 
combiningly performed based y©!! the multiplier converted into binary number 
system expression. And the points (x, y) is converted to Jacobian 
coordinates being (x, y)=(X/Z2, Y/Z3) , when doubling calculation processing 
is continuously performed, calculation processing in which a calculated 
result at the point of time (t+1) of continued doubling calculation 
processing is indicated in an equation using the present Jacobian 
coordinates. Then, in calculation processing at the point of time (t+1), 
doubling calculation processing is performed using a Zt-14 and 8Yt-14 used 
when a calculation result at the point of time (t) of previous stage is 
obtained, while obtained a Zt4 and 8Yt4 are stored. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To shorten cipher processing time. 

SOLUTION: Elements of a Jacobian variety are utilized as several kinds of 
pairs of points on a hyperelliptic curve for a disclosure key used in the 
case of enciphering an ordinary sentence in a hyperelliptic curve 
enciphering method using the Jacobian variety accompanied to the 

hyperelliptic curve, and for an operation of addition on the Jacobian 
variety used in the case of decprding encipherment using the disclosure 
key. However, pairs of points replaced by a point at infinity are used if 
necessary not to come into a conjugated relation each other among the 
points which are not points at infinity out of the points on the 

hyperelliptic curve. Conjugated relations of the points constituting the 
elements and number of point at infinity thereof are marked to reduce 
calculation in the case of addition operation on the Jacobian variety. A 
cipher processing time is shortened thereby in the present invention 
compared with conventional 'one while securing difficulty for a discrete 
logarithm problem. , h 

COPYRIGHT: (C) 1999, JPO 




4/5/10 (Item 10 from file: 347) 

DIALOG (R) File 347:JAPIO 

(c) 2004 JPO & JAPIO. All rts. reserv. 

06270870 **Image available** 
ELLIPTIC CURVE OPERATION DEVICE 

PUB, NO.: 11-212458 [JP 11212458 A]* 

PUBLISHED: August 06, 1999 (19990806) 
INVENTOR (s): MIYAJI MITSUKO 

ONO TAKATOSHI 
APPLICANT (s) : MATSUSHITA ELECTRIC IND CO LTD 
APPL. NO.: 10-013748 [JP 9813748] 
FILED: January 27, 1998 (19980127) 

INTL CLASS: G09C-001/00; G09C-001/00; G09C-001/00 ; H04L-009/30 

^ ABSTRACT 

PROBLEM TO BE SOLVED: To provide an elliptic curve operation device in a 
quick cipher and signature system. 

SOLUTION: In an auxiliary calculation table generation step 1, an auxiliary 
calculation table is generated with affine coordinates. In a kP calculation 
step 2, kP is obtained by mixture coordinates where addition to values 
(affine coordinates) of the auxiliary calculation table is obtained in 
revised Jacobian coordinates and the result is multiplied by power of two 
in correction Jacobian coordinates but the final result is obtained in 
Jacobian coordinates. Mixture. coordinates and revised Jacobian 
coordinates are used to reduce the number of multiplications. 
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